EUVD-2017-5166

Malware in sbrugna...

EUVD-2017-9473

Malware in sbrugna...

EUVD-2017-3356

Malware in sbrugna...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-414510)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-414510 advisory. A flaw was found in the Linux kernel. The existing KVM SEV API has a vulnerability that allows a non-root host user-level application to crash the host kernel by...

EUVD-2022-5613

Malicious code in bioql PyPI...

EUVD-2023-38173

Malicious code in bioql PyPI...

EUVD-2022-15379

Malicious code in bioql PyPI...

EUVD-2025-27689

Malicious code in bioql PyPI...

EUVD-2022-49219

Malicious code in bioql PyPI...

EUVD-2022-29432

Malicious code in bioql PyPI...

EUVD-2025-30324

Malicious code in bioql PyPI...

EUVD-2024-0900

Malicious code in bioql PyPI...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

PT-2025-39995

Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...

UBUNTU-CVE-2025-1131

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

CVE-2025-1131 Asterisk Unsafe Shell Sourcing in safe_asterisk Leads to Local Privilege Escalation

A local privilege escalation vulnerability exists in the safeasterisk script included with the Asterisk toolkit package. When Asterisk is started via this script common in SysV init or FreePBX environments, it sources all .sh files located in /etc/asterisk/startup.d/ as root, without validating...

PT-2025-39117

Name of the Vulnerable Software and Affected Versions Asterisk toolkit affected versions not specified Description A local privilege escalation issue exists in the safe asterisk script. When Asterisk starts using this script, it executes all .sh files in the /etc/asterisk/startup.d/ directory as...

CVE-2025-48703

CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the ttotal parameter in a filemanager changePerm request. A valid non-root username must be known...

CVE-2025-48703

CWP aka Control Web Panel or CentOS Web Panel before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the ttotal parameter in a filemanager changePerm request. A valid non-root username must be known...